Blame view
kernel/kmod.c
11.8 KB
1da177e4c Linux-2.6.12-rc2 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 |
/* kmod, the new module loader (replaces kerneld) Kirk Petersen Reorganized not to be a daemon by Adam Richter, with guidance from Greg Zornetzer. Modified to avoid chroot and file sharing problems. Mikael Pettersson Limit the concurrent number of kmod modprobes to catch loops from "modprobe needs a service that is in a module". Keith Owens <kaos@ocs.com.au> December 1999 Unblock all signals when we exec a usermode process. Shuu Yamaguchi <shuu@wondernetworkresources.com> December 2000 call_usermodehelper wait flag, and remove exec_usermodehelper. Rusty Russell <rusty@rustcorp.com.au> Jan 2003 */ |
1da177e4c Linux-2.6.12-rc2 |
21 22 23 24 25 |
#include <linux/module.h> #include <linux/sched.h> #include <linux/syscalls.h> #include <linux/unistd.h> #include <linux/kmod.h> |
1da177e4c Linux-2.6.12-rc2 |
26 |
#include <linux/slab.h> |
1da177e4c Linux-2.6.12-rc2 |
27 28 |
#include <linux/completion.h> #include <linux/file.h> |
9f3acc314 [PATCH] split lin... |
29 |
#include <linux/fdtable.h> |
1da177e4c Linux-2.6.12-rc2 |
30 31 32 33 34 |
#include <linux/workqueue.h> #include <linux/security.h> #include <linux/mount.h> #include <linux/kernel.h> #include <linux/init.h> |
d025c9db7 [PATCH] Support p... |
35 |
#include <linux/resource.h> |
8cdd4936c PM: disable userm... |
36 37 |
#include <linux/notifier.h> #include <linux/suspend.h> |
1da177e4c Linux-2.6.12-rc2 |
38 |
#include <asm/uaccess.h> |
7ead8b831 tracing/events: A... |
39 |
#include <trace/events/module.h> |
1da177e4c Linux-2.6.12-rc2 |
40 41 42 |
extern int max_threads; static struct workqueue_struct *khelper_wq; |
a1ef5adb4 remove CONFIG_KMO... |
43 |
#ifdef CONFIG_MODULES |
1da177e4c Linux-2.6.12-rc2 |
44 45 46 47 48 49 50 |
/* modprobe_path is set via /proc/sys. */ char modprobe_path[KMOD_PATH_LEN] = "/sbin/modprobe"; /** |
acae05156 module: create a ... |
51 52 |
* __request_module - try to load a kernel module * @wait: wait (or not) for the operation to complete |
bd4207c90 kmod: fix varargs... |
53 54 |
* @fmt: printf style format string for the name of the module * @...: arguments as specified in the format string |
1da177e4c Linux-2.6.12-rc2 |
55 56 57 58 59 60 61 62 63 64 |
* * Load a module using the user mode module loader. The function returns * zero on success or a negative errno code on failure. Note that a * successful module load does not mean the module did not then unload * and exit on an error of its own. Callers must check that the service * they requested is now available not blindly invoke it. * * If module auto-loading support is disabled then this function * becomes a no-operation. */ |
acae05156 module: create a ... |
65 |
int __request_module(bool wait, const char *fmt, ...) |
1da177e4c Linux-2.6.12-rc2 |
66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 |
{ va_list args; char module_name[MODULE_NAME_LEN]; unsigned int max_modprobes; int ret; char *argv[] = { modprobe_path, "-q", "--", module_name, NULL }; static char *envp[] = { "HOME=/", "TERM=linux", "PATH=/sbin:/usr/sbin:/bin:/usr/bin", NULL }; static atomic_t kmod_concurrent = ATOMIC_INIT(0); #define MAX_KMOD_CONCURRENT 50 /* Completely arbitrary value - KAO */ static int kmod_loop_msg; va_start(args, fmt); ret = vsnprintf(module_name, MODULE_NAME_LEN, fmt, args); va_end(args); if (ret >= MODULE_NAME_LEN) return -ENAMETOOLONG; |
dd8dbf2e6 security: report ... |
85 86 87 |
ret = security_kernel_module_request(module_name); if (ret) return ret; |
1da177e4c Linux-2.6.12-rc2 |
88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 |
/* If modprobe needs a service that is in a module, we get a recursive * loop. Limit the number of running kmod threads to max_threads/2 or * MAX_KMOD_CONCURRENT, whichever is the smaller. A cleaner method * would be to run the parents of this process, counting how many times * kmod was invoked. That would mean accessing the internals of the * process tables to get the command line, proc_pid_cmdline is static * and it is not worth changing the proc code just to handle this case. * KAO. * * "trace the ppid" is simple, but will fail if someone's * parent exits. I think this is as good as it gets. --RR */ max_modprobes = min(max_threads/2, MAX_KMOD_CONCURRENT); atomic_inc(&kmod_concurrent); if (atomic_read(&kmod_concurrent) > max_modprobes) { /* We may be blaming an innocent here, but unlikely */ if (kmod_loop_msg++ < 5) printk(KERN_ERR "request_module: runaway loop modprobe %s ", module_name); atomic_dec(&kmod_concurrent); return -ENOMEM; } |
7ead8b831 tracing/events: A... |
112 |
trace_module_request(module_name, wait, _RET_IP_); |
a06a4dc3a kmod: add init fu... |
113 114 115 |
ret = call_usermodehelper_fns(modprobe_path, argv, envp, wait ? UMH_WAIT_PROC : UMH_WAIT_EXEC, NULL, NULL, NULL); |
1da177e4c Linux-2.6.12-rc2 |
116 117 118 |
atomic_dec(&kmod_concurrent); return ret; } |
acae05156 module: create a ... |
119 |
EXPORT_SYMBOL(__request_module); |
118a9069f module: remove CO... |
120 |
#endif /* CONFIG_MODULES */ |
1da177e4c Linux-2.6.12-rc2 |
121 |
|
1da177e4c Linux-2.6.12-rc2 |
122 123 124 125 126 127 128 |
/* * This is the task which runs the usermode application */ static int ____call_usermodehelper(void *data) { struct subprocess_info *sub_info = data; int retval; |
1da177e4c Linux-2.6.12-rc2 |
129 130 |
spin_lock_irq(¤t->sighand->siglock); flush_signal_handlers(current, 1); |
1da177e4c Linux-2.6.12-rc2 |
131 132 133 |
spin_unlock_irq(¤t->sighand->siglock); /* We can run anywhere, unlike our parent keventd(). */ |
1a2142afa cpumask: remove d... |
134 |
set_cpus_allowed_ptr(current, cpu_all_mask); |
1da177e4c Linux-2.6.12-rc2 |
135 |
|
b73a7e76c Fix kevent's chil... |
136 137 138 139 140 |
/* * Our parent is keventd, which runs with elevated scheduling priority. * Avoid propagating that into the userspace child. */ set_user_nice(current, 0); |
a06a4dc3a kmod: add init fu... |
141 142 143 144 145 |
if (sub_info->init) { retval = sub_info->init(sub_info); if (retval) goto fail; } |
d7627467b Make do_execve() ... |
146 147 148 |
retval = kernel_execve(sub_info->path, (const char *const *)sub_info->argv, (const char *const *)sub_info->envp); |
1da177e4c Linux-2.6.12-rc2 |
149 150 |
/* Exec failed? */ |
a06a4dc3a kmod: add init fu... |
151 |
fail: |
1da177e4c Linux-2.6.12-rc2 |
152 153 154 |
sub_info->retval = retval; do_exit(0); } |
0ab4dc922 usermodehelper: s... |
155 156 157 |
void call_usermodehelper_freeinfo(struct subprocess_info *info) { if (info->cleanup) |
a06a4dc3a kmod: add init fu... |
158 |
(*info->cleanup)(info); |
0ab4dc922 usermodehelper: s... |
159 160 161 |
kfree(info); } EXPORT_SYMBOL(call_usermodehelper_freeinfo); |
1da177e4c Linux-2.6.12-rc2 |
162 163 164 165 166 |
/* Keventd can't block, but this (a child) can. */ static int wait_for_helper(void *data) { struct subprocess_info *sub_info = data; pid_t pid; |
1da177e4c Linux-2.6.12-rc2 |
167 |
|
7d6422421 wait_for_helper: ... |
168 169 170 171 |
/* If SIGCLD is ignored sys_wait4 won't populate the status. */ spin_lock_irq(¤t->sighand->siglock); current->sighand->action[SIGCHLD-1].sa.sa_handler = SIG_DFL; spin_unlock_irq(¤t->sighand->siglock); |
1da177e4c Linux-2.6.12-rc2 |
172 173 174 175 176 |
pid = kernel_thread(____call_usermodehelper, sub_info, SIGCHLD); if (pid < 0) { sub_info->retval = pid; } else { |
7d6422421 wait_for_helper: ... |
177 |
int ret = -ECHILD; |
1da177e4c Linux-2.6.12-rc2 |
178 179 180 181 182 183 184 185 186 |
/* * Normally it is bogus to call wait4() from in-kernel because * wait4() wants to write the exit code to a userspace address. * But wait_for_helper() always runs as keventd, and put_user() * to a kernel address works OK for kernel threads, due to their * having an mm_segment_t which spans the entire address space. * * Thus the __user pointer cast is valid here. */ |
111dbe0c8 [PATCH] Fix ____c... |
187 188 189 190 191 192 193 194 195 |
sys_wait4(pid, (int __user *)&ret, 0, NULL); /* * If ret is 0, either ____call_usermodehelper failed and the * real error code is already in sub_info->retval or * sub_info->retval is 0 anyway, so don't mess with it then. */ if (ret) sub_info->retval = ret; |
1da177e4c Linux-2.6.12-rc2 |
196 |
} |
d47419cd9 call_usermodehelp... |
197 |
complete(sub_info->complete); |
1da177e4c Linux-2.6.12-rc2 |
198 199 200 201 |
return 0; } /* This is run by khelper thread */ |
65f27f384 WorkStruct: Pass ... |
202 |
static void __call_usermodehelper(struct work_struct *work) |
1da177e4c Linux-2.6.12-rc2 |
203 |
{ |
65f27f384 WorkStruct: Pass ... |
204 205 |
struct subprocess_info *sub_info = container_of(work, struct subprocess_info, work); |
86313c488 usermodehelper: T... |
206 |
enum umh_wait wait = sub_info->wait; |
d47419cd9 call_usermodehelp... |
207 |
pid_t pid; |
1da177e4c Linux-2.6.12-rc2 |
208 209 210 211 |
/* CLONE_VFORK: wait until the usermode helper has execve'd * successfully We need the data structures to stay around * until that is done. */ |
d47419cd9 call_usermodehelp... |
212 |
if (wait == UMH_WAIT_PROC) |
1da177e4c Linux-2.6.12-rc2 |
213 214 215 216 217 |
pid = kernel_thread(wait_for_helper, sub_info, CLONE_FS | CLONE_FILES | SIGCHLD); else pid = kernel_thread(____call_usermodehelper, sub_info, CLONE_VFORK | SIGCHLD); |
86313c488 usermodehelper: T... |
218 219 |
switch (wait) { case UMH_NO_WAIT: |
d47419cd9 call_usermodehelp... |
220 |
call_usermodehelper_freeinfo(sub_info); |
86313c488 usermodehelper: T... |
221 |
break; |
a98f0dd34 [PATCH] x86-64: A... |
222 |
|
86313c488 usermodehelper: T... |
223 224 225 |
case UMH_WAIT_PROC: if (pid > 0) break; |
86313c488 usermodehelper: T... |
226 |
/* FALLTHROUGH */ |
86313c488 usermodehelper: T... |
227 |
case UMH_WAIT_EXEC: |
04b1c384f call_usermodehelp... |
228 229 |
if (pid < 0) sub_info->retval = pid; |
1da177e4c Linux-2.6.12-rc2 |
230 |
complete(sub_info->complete); |
86313c488 usermodehelper: T... |
231 |
} |
1da177e4c Linux-2.6.12-rc2 |
232 |
} |
1bfcf1304 pm: rework disabl... |
233 |
#ifdef CONFIG_PM_SLEEP |
ccd4b65ae PM: prevent froze... |
234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 |
/* * If set, call_usermodehelper_exec() will exit immediately returning -EBUSY * (used for preventing user land processes from being created after the user * land has been frozen during a system-wide hibernation or suspend operation). */ static int usermodehelper_disabled; /* Number of helpers running */ static atomic_t running_helpers = ATOMIC_INIT(0); /* * Wait queue head used by usermodehelper_pm_callback() to wait for all running * helpers to finish. */ static DECLARE_WAIT_QUEUE_HEAD(running_helpers_waitq); /* * Time to wait for running_helpers to become zero before the setting of * usermodehelper_disabled in usermodehelper_pm_callback() fails */ #define RUNNING_HELPERS_TIMEOUT (5 * HZ) |
1bfcf1304 pm: rework disabl... |
255 256 257 258 |
/** * usermodehelper_disable - prevent new helpers from being started */ int usermodehelper_disable(void) |
8cdd4936c PM: disable userm... |
259 |
{ |
ccd4b65ae PM: prevent froze... |
260 |
long retval; |
1bfcf1304 pm: rework disabl... |
261 262 263 264 265 266 267 268 269 |
usermodehelper_disabled = 1; smp_mb(); /* * From now on call_usermodehelper_exec() won't start any new * helpers, so it is sufficient if running_helpers turns out to * be zero at one point (it may be increased later, but that * doesn't matter). */ retval = wait_event_timeout(running_helpers_waitq, |
ccd4b65ae PM: prevent froze... |
270 271 |
atomic_read(&running_helpers) == 0, RUNNING_HELPERS_TIMEOUT); |
1bfcf1304 pm: rework disabl... |
272 273 |
if (retval) return 0; |
8cdd4936c PM: disable userm... |
274 |
|
1bfcf1304 pm: rework disabl... |
275 276 277 278 279 280 281 282 283 284 |
usermodehelper_disabled = 0; return -EAGAIN; } /** * usermodehelper_enable - allow new helpers to be started again */ void usermodehelper_enable(void) { usermodehelper_disabled = 0; |
8cdd4936c PM: disable userm... |
285 |
} |
ccd4b65ae PM: prevent froze... |
286 287 288 289 290 291 292 293 294 295 296 |
static void helper_lock(void) { atomic_inc(&running_helpers); smp_mb__after_atomic_inc(); } static void helper_unlock(void) { if (atomic_dec_and_test(&running_helpers)) wake_up(&running_helpers_waitq); } |
1bfcf1304 pm: rework disabl... |
297 |
#else /* CONFIG_PM_SLEEP */ |
ccd4b65ae PM: prevent froze... |
298 299 300 301 |
#define usermodehelper_disabled 0 static inline void helper_lock(void) {} static inline void helper_unlock(void) {} |
1bfcf1304 pm: rework disabl... |
302 |
#endif /* CONFIG_PM_SLEEP */ |
ccd4b65ae PM: prevent froze... |
303 |
|
1da177e4c Linux-2.6.12-rc2 |
304 |
/** |
0ab4dc922 usermodehelper: s... |
305 |
* call_usermodehelper_setup - prepare to call a usermode helper |
61df47c8d kernel-doc fix fo... |
306 307 308 |
* @path: path to usermode executable * @argv: arg vector for process * @envp: environment for process |
ac331d158 call_usermodehelp... |
309 |
* @gfp_mask: gfp mask for memory allocation |
0ab4dc922 usermodehelper: s... |
310 |
* |
61df47c8d kernel-doc fix fo... |
311 |
* Returns either %NULL on allocation failure, or a subprocess_info |
0ab4dc922 usermodehelper: s... |
312 313 314 |
* structure. This should be passed to call_usermodehelper_exec to * exec the process and free the structure. */ |
ac331d158 call_usermodehelp... |
315 316 |
struct subprocess_info *call_usermodehelper_setup(char *path, char **argv, char **envp, gfp_t gfp_mask) |
0ab4dc922 usermodehelper: s... |
317 318 |
{ struct subprocess_info *sub_info; |
ac331d158 call_usermodehelp... |
319 |
sub_info = kzalloc(sizeof(struct subprocess_info), gfp_mask); |
0ab4dc922 usermodehelper: s... |
320 321 322 323 324 325 326 |
if (!sub_info) goto out; INIT_WORK(&sub_info->work, __call_usermodehelper); sub_info->path = path; sub_info->argv = argv; sub_info->envp = envp; |
0ab4dc922 usermodehelper: s... |
327 328 329 330 331 332 |
out: return sub_info; } EXPORT_SYMBOL(call_usermodehelper_setup); /** |
a06a4dc3a kmod: add init fu... |
333 |
* call_usermodehelper_setfns - set a cleanup/init function |
0ab4dc922 usermodehelper: s... |
334 335 |
* @info: a subprocess_info returned by call_usermodehelper_setup * @cleanup: a cleanup function |
a06a4dc3a kmod: add init fu... |
336 337 338 339 340 341 |
* @init: an init function * @data: arbitrary context sensitive data * * The init function is used to customize the helper process prior to * exec. A non-zero return code causes the process to error out, exit, * and return the failure to the calling process |
0ab4dc922 usermodehelper: s... |
342 |
* |
a06a4dc3a kmod: add init fu... |
343 |
* The cleanup function is just before ethe subprocess_info is about to |
0ab4dc922 usermodehelper: s... |
344 345 346 347 |
* be freed. This can be used for freeing the argv and envp. The * Function must be runnable in either a process context or the * context in which call_usermodehelper_exec is called. */ |
a06a4dc3a kmod: add init fu... |
348 349 350 351 |
void call_usermodehelper_setfns(struct subprocess_info *info, int (*init)(struct subprocess_info *info), void (*cleanup)(struct subprocess_info *info), void *data) |
0ab4dc922 usermodehelper: s... |
352 353 |
{ info->cleanup = cleanup; |
a06a4dc3a kmod: add init fu... |
354 355 |
info->init = init; info->data = data; |
0ab4dc922 usermodehelper: s... |
356 |
} |
a06a4dc3a kmod: add init fu... |
357 |
EXPORT_SYMBOL(call_usermodehelper_setfns); |
0ab4dc922 usermodehelper: s... |
358 359 |
/** |
0ab4dc922 usermodehelper: s... |
360 361 |
* call_usermodehelper_exec - start a usermode application * @sub_info: information about the subprocessa |
1da177e4c Linux-2.6.12-rc2 |
362 |
* @wait: wait for the application to finish and return status. |
a98f0dd34 [PATCH] x86-64: A... |
363 364 365 |
* when -1 don't wait at all, but you get no useful error back when * the program couldn't be exec'ed. This makes it safe to call * from interrupt context. |
1da177e4c Linux-2.6.12-rc2 |
366 367 368 369 |
* * Runs a user-space application. The application is started * asynchronously if wait is not set, and runs as a child of keventd. * (ie. it runs with full root capabilities). |
1da177e4c Linux-2.6.12-rc2 |
370 |
*/ |
0ab4dc922 usermodehelper: s... |
371 |
int call_usermodehelper_exec(struct subprocess_info *sub_info, |
86313c488 usermodehelper: T... |
372 |
enum umh_wait wait) |
1da177e4c Linux-2.6.12-rc2 |
373 |
{ |
60be6b9a4 [PATCH] lockdep: ... |
374 |
DECLARE_COMPLETION_ONSTACK(done); |
784680336 Fix unbalanced he... |
375 |
int retval = 0; |
1da177e4c Linux-2.6.12-rc2 |
376 |
|
ccd4b65ae PM: prevent froze... |
377 |
helper_lock(); |
784680336 Fix unbalanced he... |
378 |
if (sub_info->path[0] == '\0') |
0ab4dc922 usermodehelper: s... |
379 |
goto out; |
1da177e4c Linux-2.6.12-rc2 |
380 |
|
8cdd4936c PM: disable userm... |
381 |
if (!khelper_wq || usermodehelper_disabled) { |
0ab4dc922 usermodehelper: s... |
382 383 384 |
retval = -EBUSY; goto out; } |
a98f0dd34 [PATCH] x86-64: A... |
385 |
|
a98f0dd34 [PATCH] x86-64: A... |
386 |
sub_info->complete = &done; |
a98f0dd34 [PATCH] x86-64: A... |
387 388 389 |
sub_info->wait = wait; queue_work(khelper_wq, &sub_info->work); |
784680336 Fix unbalanced he... |
390 391 |
if (wait == UMH_NO_WAIT) /* task has freed sub_info */ goto unlock; |
1da177e4c Linux-2.6.12-rc2 |
392 |
wait_for_completion(&done); |
a98f0dd34 [PATCH] x86-64: A... |
393 |
retval = sub_info->retval; |
0ab4dc922 usermodehelper: s... |
394 |
|
784680336 Fix unbalanced he... |
395 |
out: |
0ab4dc922 usermodehelper: s... |
396 |
call_usermodehelper_freeinfo(sub_info); |
784680336 Fix unbalanced he... |
397 |
unlock: |
ccd4b65ae PM: prevent froze... |
398 |
helper_unlock(); |
a98f0dd34 [PATCH] x86-64: A... |
399 |
return retval; |
1da177e4c Linux-2.6.12-rc2 |
400 |
} |
0ab4dc922 usermodehelper: s... |
401 |
EXPORT_SYMBOL(call_usermodehelper_exec); |
1da177e4c Linux-2.6.12-rc2 |
402 403 404 405 406 407 |
void __init usermodehelper_init(void) { khelper_wq = create_singlethread_workqueue("khelper"); BUG_ON(!khelper_wq); } |